Answered step by step
Verified Expert Solution
Link Copied!

Question

1 Approved Answer

Im having a hard time finding the answers to these with the .eve file from the book which is Guide to Computer Forensics and Investigations

image text in transcribed

image text in transcribed

Im having a hard time finding the answers to these with the .eve file from the book which is Guide to Computer Forensics and Investigations (5th Edition). Any help would be appreciated.

Completing the Case The files on George's USB drive indicate that he was conducting a side business on his company computer. Now that you have retrieved and analyzed the evidence, you need to find the answers to the following questions to write the final report: How did George's manager acquire the disk? . .Did George perform the work on a laptop, which is his own property? If so, did he conduct business transactions on his break or during his lunch hour? At what times of the day was George using the non-work-related files? How did you retrieve this information? . . Which company policies apply? Se... File Name File Size Attribu... Deleted Created Date Modified Date Accessed Date 12/31/1969 19:00 12/09/2005 06:59 12/09/2005 06:59 12/09/2005 06:59 12/09/2005 06:59 12/09/2005 06:59 12/09/2005 06:59 All Files Client Info Bling Letter NO mdb doc txt xls txt doc 104,448 bytes a --... 24,064 bytes a - - 227 bytes a 13,824 bytes a - 12/31/1969 19:00 12/31/1969 19:00 12/09/2005 06:53 12/09/2005 00:00 12/09/2005 06:50 12/09/2005 00:00 12/09/2005 06:52 12/09/2005 00:00 12/09/2005 06:52 12/09/2005 00:00 12/09/2005 06:5112/09/2005 00:00 12/09/2005 06:5012/09/2005 00:00 .NO YES YES NO YES YES confirmation Income letter1 Regrets 121 bytes 23,552 bytes a - Completing the Case The files on George's USB drive indicate that he was conducting a side business on his company computer. Now that you have retrieved and analyzed the evidence, you need to find the answers to the following questions to write the final report: How did George's manager acquire the disk? . .Did George perform the work on a laptop, which is his own property? If so, did he conduct business transactions on his break or during his lunch hour? At what times of the day was George using the non-work-related files? How did you retrieve this information? . . Which company policies apply? Se... File Name File Size Attribu... Deleted Created Date Modified Date Accessed Date 12/31/1969 19:00 12/09/2005 06:59 12/09/2005 06:59 12/09/2005 06:59 12/09/2005 06:59 12/09/2005 06:59 12/09/2005 06:59 All Files Client Info Bling Letter NO mdb doc txt xls txt doc 104,448 bytes a --... 24,064 bytes a - - 227 bytes a 13,824 bytes a - 12/31/1969 19:00 12/31/1969 19:00 12/09/2005 06:53 12/09/2005 00:00 12/09/2005 06:50 12/09/2005 00:00 12/09/2005 06:52 12/09/2005 00:00 12/09/2005 06:52 12/09/2005 00:00 12/09/2005 06:5112/09/2005 00:00 12/09/2005 06:5012/09/2005 00:00 .NO YES YES NO YES YES confirmation Income letter1 Regrets 121 bytes 23,552 bytes a

Step by Step Solution

There are 3 Steps involved in it

Step: 1

blur-text-image

Get Instant Access to Expert-Tailored Solutions

See step-by-step solutions with expert insights and AI powered tools for academic success

Step: 2

blur-text-image

Step: 3

blur-text-image

Ace Your Homework with AI

Get the answers you need in no time with our AI-driven, step-by-step assistance

Get Started

Recommended Textbook for

Database And Expert Systems Applications 33rd International Conference Dexa 2022 Vienna Austria August 22 24 2022 Proceedings Part 1 Lncs 13426

Authors: Christine Strauss ,Alfredo Cuzzocrea ,Gabriele Kotsis ,A Min Tjoa ,Ismail Khalil

1st Edition

3031124227, 978-3031124228

More Books

Students also viewed these Databases questions

Question

List and describe two main types of software licenses.

Answered: 1 week ago